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This policy (the Policy) sets out in accordance with the Privacy Act 1988 (Cth) (the Privacy Act) the 
way in which The Australian Wine Research Institute Limited (ACN 007558296) and its agents and 
associated entities (together the AWRI, we, us, or our as the context dictates) may collect, store, use, 
manage and protect your Credit Information (CI) when assessing, approving or rejecting an application 
for credit, providing you with credit, managing the provision of credit, recovering a debt, or dealing with 
guarantors or indemnitors of a person to whom we have been asked to provide credit. 


enquiring about the provision or the continuation of Credit 

applying for the provision of Credit 

accepting or continuing to accept Credit from us 

acting, or applying to act, as guarantor or indemnitor for a Person applying for Credit from us 


aor g 
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after this Policy has been brought to your attention, you acknowledge and consent to the collection, 
use, storage or disclosure of your Personal Information by us in accordance with this Policy and the 
Privacy Act. 


If you do not agree to us handling your CI in the manner set out in this Policy you must immediately 
cease to access our website, our Credit Applications, our guarantor or indemnity forms, and you 
should not provide us with any of your CI. 


1. What do the different terms in this Policy mean? 
Credit means a contract, arrangement or understanding under which either payment of a debt 
owed by one person to another is deferred for at least seven days, or where a person incurs a 
debt to another person, and defers the payment of the debt for at least seven days. We may offer 
or allow you Credit in relation to your purchase of products or services from us. 


Credit Information or CI is Personal Information (see below) that is, or may include: 


a. identification information 

b. repayment history information 

C: a statement that an information request has been made in relation to the individual by a 
credit provider, mortgage insurer or trade insurer 

d. the type of commercial credit, and the amount of credit, sought in an application that has 


been made by an individual to us as a Credit Provider 





e. default or payment information 
f. information about new arrangements relating to Credit 
g. information about court proceedings or personal insolvency relating to Credit 
h. publicly available information about creditworthiness 
i. credit reporting information that we disclose to or receive from a credit reporting 
body/agency 
j. information derived from credit reporting information that we receive from credit reporting 
bodies/agencies that has a bearing on your credit worthiness. 
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Personal Information means information or an opinion that identifies you, or from which your 
identity can be reasonably ascertained (irrespective of whether the information or opinion is true 
or not, and regardless of whatever form it is recorded in). 


Generally words and phrases in this Policy are used in accordance with or as they are defined in 
the Privacy Act. 


2. What kinds of CI might we collect and hold? 
We may collect (and hold) different CI from you depending upon how you interact with us. 


If you apply to receive Credit from us, or offer to act as a guarantor or indemnitor, we may 
collect CI about you. This may include: 

your contact details 

how your business is structured 

your finances and the performance of your business 

details of other individuals involved in your business 

details of your financial advisors and accountants 

your debt repayment history 

reports on your creditworthiness 


gqmpange 


We may also collect Personal Information about you that is not CI. This will be dealt with in 
accordance with our standard Privacy Policy, which can be accessed here: 
https://www.awri.com.au/privacy-policy/ 





3. How do we collect CI? 
We collect Credit Information from: 
a. you directly (when we contact you, when you contact us, when we communicate with you, 
when you fill out a Credit Application Form, or an application to act as guarantor or 
indemnitor; and when you visit one of our facilities or offices); 


b. third parties, including referees and accountants, who you have authorised to provide us 
with information; 
c. publicly available sources; and 
d. credit reporting bodies/agencies. 
4. How do we hold and secure your CI? 


We store your CI in hard copy format and digitally, on site and additionally in off-site backups. 
We also engage third party information technology/cloud service providers to assist us with the 
storage of our data and to administer our internal operations. We take reasonable care to ensure 
that your CI is kept securely and disposed of when it is no longer necessary to retain it to fulfil 

the purposes for which the information was collected, or as required by law. To help protect the 
privacy of CI collected and held, we maintain physical, technical and administrative safeguards. 


All digital material is secured using best practice methods. Any digital transfer of CI is secured 
using a range of methods including but not limited to encryption. 


If you provide any CI to us via an online service or other digital means, or if we provide 
information to you by such means, the privacy, security and integrity cannot be guaranteed 
during its transmission unless we have indicated to you beforehand that a particular transaction 
or transmission of information will be protected (for example by encryption). To the extent 
permitted by law, we accept no responsibility for unauthorised access of Personal Information 
or CI held by us. However, in the event of any such unauthorised access and/or disclosure, we 
comply with our obligations under the Privacy Act in dealing with any such unauthorised access 
and/or disclosure, including any obligations in respect of eligible data breaches within the 
meaning of the Privacy Act. 
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5. Why do we collect, hold, use and disclose CI? 
The AWRI may collect CI for a number of reasons or purposes, including: 
a. assessing an application for Credit 
b. assessing an application to act as guarantor or indemnitor 
c. providing Credit 
d managing the provision of Credit and collection of repayments or enforcement of 
guarantees 
assessing and dealing with what we reasonably believe to be a serious credit infringement 
f. assisting you to avoid defaulting on your obligations to repay a debt. 
Our use of CI may extend beyond these uses, but will be restricted to purposes that we consider 
to be related to our functions and activities and consistent with our obligations under Part IA 
of the Privacy Act. 
6. What do we do with your CI? 
If we collect CI from you, we may: 
a. use that information for any of the reasons or purposes in clause 5 of this Policy 
b store that information in accordance with this Policy 
C; share that information with our related bodies corporate 
d pass that information to other credit providers with an Australian link or an enforcement 
body where we believe there has been a serious credit infringement 
provide your CI to a person who is proposing to act as guarantor/indemnitor 
f. provide your CI to a person who is acting as guarantor/indemnitor where necessary to 
enforce a guarantee/indemnity 
g. disclose your information to a debt collector or other debt enforcement agency 
h. provide that information to third parties as required by law. 
We will not disclose repayment history information about an individual unless permitted by the 
Privacy Act. 
7. Disclosure of CI to Other Organisations 
The AWRI may disclose your CI to: 
a. third parties including credit reporting bodies/agencies who assist us in assessing or 
processing applications for credit, and managing the credit we provide; 
b. other credit providers (with your consent); 
C; potential or current guarantors; 
d. debt collection agencies; 
e. government authorities; 
f. our financial and legal advisors or other entities when we are assessing an application for 
credit or enforcing our rights relating to the provision of credit; 
g. Overseas entities, in accordance with clause 8 below. 
Part IIIA of the Privacy Act places certain restrictions on when we may disclose your CI to 
these organisations. 
8. Do we ever send your information overseas? 
We may need to disclose your CI to overseas entities from time to time. 
Where we disclose your CI to an overseas entity we will always comply with the provisions of 
the Part INA of the Privacy Act, to the extent they apply to the provision of information 
overseas. 
9. Keeping your information up to date 
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We will at all times take reasonable steps to keep your CI up to date, accurate and complete. If 
we reasonably believe that there is a deficiency in the CI we hold, we will take reasonable steps 
to correct it, which may include contacting you to obtain updated information. 


Where we have updated or corrected information, we will provide written notice of the 
correction to each recipient of the information within a reasonable period of time. 





10. Can you access your CI or request that it be corrected? 

a. You may request access to or correction of the CI that we hold about you by contacting us 
by any of the methods as set out below (an Access Request). 

b. Upon receiving an Access Request we may request further details from you to verify your 
identity. We reserve the right not to provide you with access to CI if we cannot verify your 
identity to our reasonable satisfaction. 

Cc. An administrative fee may be charged to cover our costs in providing you with access to 
your Personal Information. This fee will be explained to you before it has been incurred. 

d. we will respond to your Access Request within a reasonable period of time by: 

1) providing you with access to your Personal Information; 
2) rejecting your Access Request, and providing you reasons for this rejection. 
e. Access Requests may be denied where: 
1) we believe your request is frivolous or vexatious; 
2) we are entitled to reject it by law; 
3) giving you the information would be unlawful; 
4) giving you the information would be likely to prejudice an enforcement related 
activity undertaken by an enforcement body; 
5) we are unable to verify your identity; or 
6) you have not paid the administrative fees referred to in paragraph 10c, above. 

f. If you believe that the CI that we hold is inaccurate or otherwise requires correction, you 
may send us a Correction Request. We will review your Personal Information and respond 
to the Correction Request within a reasonable period of time, generally within 30 days of 
your request, unless we agree in writing to a longer time. 

g. We will deal with any Correction Request by correcting the information within 30 days 
from when the Correction Request is made, notifying you within a reasonable period of 
having corrected the information, and within a reasonable period give each recipient of the 
information written notice of the correction. If we decide not to correct the information, 
we will notify you, with reasons, within a reasonable time. 

h. We will notify you when we have made a correction at your request, or notify you in writing 
why we have not made the requested correction. 

11. Information we no longer require 
Where we no longer require CI, and we are not under any legal obligation to retain the 
information, we will within a reasonable time destroy that information. 

12. Does this Policy ever change? 

From time to time we may make changes to this Policy. When we do, we will highlight those 

changes in yellow for a period of 28 days. Changes come into effect from the time when you 

next log on to our website or are notified of the updated policy, whichever is earlier. Our 
website will contain a record of when (month and year) the most recent amendments were made 
to this policy. You should review the policy each time you visit our website to keep up to date 
with any changes. 

13. What happens if you have a question or complain about how we have handled your CI? 

If you have a question or complaint, you can raise it with us by: 

Emailing: enquiries@awri.com.au; 

Calling us on: (08) 8313 6600 

Faxing us on: (08) 8313 6601 
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Sending a letter to: The Privacy Officer 
The Australian Wine Research Institute Ltd 
PO BOX 197 
Glen Osmond SA 5064 


We take all complaints seriously and will respond to you within a reasonable period of time. 


If you aren’t satisfied with the way we have handled your complaint, you can make a complaint 
to the Office of the Australian Information Commissioner at http://oaic.gov.au. 
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